Discuss Cisco 300-215 Exam Topic 6 Question 102

Refer to the exhibit.

What is occurring within the exhibit?

ASource 10.1.21.101 sends HTTP requests with the size of 302 kb.

BHost 209.141.51.196 redirects the client request from /Lk9tdZ to /files/1.bin.

CHost 209.141.51.196 redirects the client request to port 49723.

DSource 10.1.21.101 is communicating with 209.141.51.196 over an encrypted channel.

Suggested Answer: B

The Wireshark capture shows a series of HTTP requests and responses:

The client (10.1.21.101) sends a GET request for /Lk9tdZ.

The server (209.141.51.196) responds with HTTP/1.1 302 Found, which is a standard HTTP status code indicating a redirection.

The subsequent GET request from the client is for /files/1.bin, which indicates it followed the redirect.

This behavior confirms that the server is issuing an HTTP 302 redirect from the initial request path /Lk9tdZ to /files/1.bin. This is often observed in malware command-and-control behavior or file download staging.

Option A is incorrect: 302 is a status code, not a data size.

Option C is incorrect: port 49723 is a source/destination ephemeral port, not a redirect target.

Option D is incorrect: communication is over HTTP, not HTTPS (which would indicate encryption).

Get Premium 300-215 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

18 comments · newest first

Herman 10 months ago

Definitely not option D, no encryption mentioned here.

Edelmira 10 months ago

I think it's option B, that makes the most sense.

Yasuko 11 months ago

Wait, are we sure about the size of those HTTP requests?

Mary 11 months ago

I thought redirects only happened on specific ports, this is interesting!

Kip 11 months ago

Looks like 209.141.51.196 is doing some redirects.

Rosita 11 months ago

I don't think it's about encryption; I remember we discussed that in a different context.

Keena 11 months ago

I’m a bit confused about the ports. Wasn't there a question about port redirection in our last practice session?

Mel 12 months ago

I feel like option B sounds familiar; I practiced a question where a host redirected a request, but I can't recall the specifics.

Mary 12 months ago

I think I remember something about HTTP requests, but I'm not sure if the size is relevant here.

Allene 1 year ago

Okay, I see the source IP, destination IP, and some request/response details. I think I can use that information to deduce the right answer here.

Lillian 1 year ago

Hmm, the question is asking what's occurring, so I'll need to pay close attention to the specific details like the URL paths and port numbers to figure out the correct answer.

Elli 1 year ago

The exhibit shows some HTTP request and response information, so I think the key is to understand the flow of traffic between the source and destination hosts.

Trinidad 1 year ago

This looks like a network traffic analysis question. I'll need to carefully examine the details in the exhibit to determine what's happening.

Rickie 1 year ago

Haha, looks like the server is playing a game of hide-and-seek with the client! Option B is the winner here.

Hayley 1 year ago

I'm not sure, but I think the answer might be C) Host 209.141.51.196 redirects the client request to port 49723.

Alesia 1 year ago

I agree with Winfred, it looks like a redirection happening in the exhibit.

Winfred 1 year ago

I think the answer is B) Host 209.141.51.196 redirects the client request from /Lk9tdZ to /files/1.bin.

Arlyne 1 year ago

The client is being redirected from /Lk9tdZ to /files/1.bin, so option B seems correct.

Cisco 300-215 Exam - Topic 6 Question 102 Discussion